wp-admin/plugins.php in WordPress before 3.3.2 allows remote authenticated site administrators to bypass intended access restrictions and deactivate network-wide plugins via unspecified vectors.
http://www.cvedetails.com/cve/CVE-2012-2402/
http://core.trac.wordpress.org/changeset/20526/branches/3.3
This vulnerability affects the following application versions:
- WordPress 3.1
- WordPress 3.1.1
- WordPress 3.1.2
- WordPress 3.1.3
- WordPress 3.1.4
- WordPress 3.2
- WordPress 3.2.1
- WordPress 3.3
- WordPress 3.3.1